FBI Accuses North Korean Hackers of Massive Cryptocurrency Theft
ROME (AP) — The Federal Bureau of Investigation (FBI) has officially linked a significant theft of cryptocurrency, totaling approximately $1.5 billion in Ethereum, to hackers affiliated with North Korea. The incident, which occurred earlier this month, targeted Bybit, one of the largest cryptocurrency exchanges globally, and marks one of the most substantial cryptocurrency thefts ever reported.
Details of the Theft
According to the FBI, the hacking group responsible for the theft has been identified as the TraderTraitor and Lazarus Group. The FBI’s announcement indicated that these hackers are utilizing modified cryptocurrency trading applications to infiltrate systems and steal digital assets. In a public service announcement released late Wednesday, they expressed confidence that the North Korean-backed hackers were the perpetrators.
The FBI highlighted the speed at which TraderTraitor actors are acting, noting that some of the stolen assets have already been transformed into Bitcoin and dispersed across numerous addresses on various blockchains. This quick conversion is expected as part of a broader scheme to launder the funds and eventually exchange them for traditional currency.
North Korea’s Ongoing Cyber Activities
Despite these allegations, North Korean state media has not commented on the theft, and Pyongyang’s mission to the United Nations in Geneva has not responded to requests for clarification on the FBI’s claims.
South Korea’s intelligence agency has indicated that North Korea has engaged in the theft of an estimated $1.2 billion in cryptocurrency and other digital assets over the past five years. These cyber operations reportedly provide a much-needed source of foreign currency to bolster the nation’s weak economy and to fund its nuclear weapons program amid stringent United Nations sanctions and the ongoing border closures due to the COVID-19 pandemic.
A panel of U.N. experts is currently investigating 58 suspected cyberattacks attributed to North Korea between 2017 and 2023, which resulted in around $3 billion being stolen to purportedly support the regime’s weapons development initiatives.
Bybit’s Response and Analysis
Ben Zhou, the co-founder and CEO of Bybit, acknowledged the gravity of the situation in a post on social media platform X, linking to a website offering $140 million in rewards for information that could lead to tracking the stolen cryptocurrency and freezing the funds on other exchanges.
Bybit has detailed that the theft occurred during what was intended to be a routine transfer of Ethereum from a "cold" or offline wallet. However, the transfer was "manipulated" by an unidentified assailant who rerouted the cryptocurrency to an unknown address. Manuel Villegas, an analyst at Julius Baer, described the hack as highly sophisticated, involving a "blind signing type of exploit" where attackers create a nearly identical fake interface to deceive users.
According to blockchain analytics firm Certik, this incident is now regarded as "the largest breach" in blockchain transaction history. The ramifications of the hack have also shaken the broader cryptocurrency market, resulting in recent price declines for various digital currencies, including Bitcoin, which fell from above $100,000 to around $82,000 per coin.
The Impact on the Crypto Industry
The fallout from this hacking incident is expected to amplify scrutiny and regulatory concerns for cryptocurrency exchanges and their customers. Villegas pointed out that while the situation is painful for Bybit’s users, heightened regulatory oversight may also follow.
In the backdrop of these events, the United Arab Emirates has maintained its support for Bybit’s operations, having already granted the exchange "in-principle approval" from both the UAE’s Security and Commodities Authority and Dubai’s Virtual Assets Regulatory Authority. The UAE has become a hub for numerous crypto firms and wealthy individuals attracted to the region’s favorable tax environment.
A report from blockchain analysis firm Chainalysis predicts that between July 2023 and June 2024, the UAE will receive over $30 billion in cryptocurrency transactions, positioning the country among the top 40 globally in terms of crypto inflow.
As investigations continue and the impact of this theft unfolds, the cryptocurrency community remains vigilant, navigating the complexities of security, regulation, and market fluctuations.